https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T13:17:13.876229+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-01097 bdu:2021-01097 2026-10-06T13:17:13.882555+00:00 bdu:2021-01097 https://cve.radiocsirt.org/vuln/bit-magento-2021-21016 BIT-magento-2021-21016 — Magento Commerce Unauthorized Data Modification Could Lead to Arbitrary Code Execution 2026-10-06T13:17:13.882613+00:00

Affected: Bitnami: magento

Magento versions 2.4.1 (and earlier), 2.4.0 (and earlier) and 2.3.6 (and earlier) are vulnerable to OS command injection via the WebAPI. Successful exploitation could lead to remote code execution by an authenticated attacker. Access to the admin console is required for successful exploitation.

 https://cve.radiocsirt.org/vuln/certfr-2021-avi-100 certfr-2021-avi-100 — De multiples vulnérabilités ont été découvertes dans Magento. Elles permettent à un attaquant de provoquer une exécutio… 2026-10-06T13:17:13.882675+00:00 certfr-2021-avi-100 https://cve.radiocsirt.org/vuln/cnvd-2021-13928 cnvd-2021-13928 2026-10-06T13:17:13.882710+00:00 cnvd-2021-13928 https://cve.radiocsirt.org/vuln/euvd-2026-171315 EUVD-2026-171315 2026-10-06T13:17:13.882741+00:00 EUVD-2026-171315 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21016 fkie_cve-2021-21016 2026-10-06T13:17:13.882767+00:00

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to OS command injection via the WebAPI. Successful exploitation could lead to remote code execution by an authenticated attacker. Access to the admin console is required for successful exploitation.

 https://cve.radiocsirt.org/vuln/ghsa-792f-c8mp-2cr5 GHSA-792f-c8mp-2cr5 — Magento OS command injection via the WebAPI 2026-10-06T13:17:13.882815+00:00

Affected: Packagist: magento/community-edition, Packagist: magento/project-community-edition

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to OS command injection via the WebAPI. Successful exploitation could lead to remote code execution by an authenticated attacker. Access to the admin console is required for successful exploitation.

 https://cve.radiocsirt.org/vuln/gsd-2021-21016 gsd-2021-21016 2026-10-06T13:17:13.882863+00:00 gsd-2021-21016